The Federal Bureau of Investigation said on Wednesday that North Korea was responsible for the theft of approximately $1.5 billion in virtual assets from cryptocurrency exchange ByBit.

North Korean hackers behind the $1.4 billion Bybit hack control more than 11,000 cryptocurrency wallets used to launder stolen funds, according to blockchain analytics firm Elliptic. On Feb. 25, four days after the Bybit exploit,

The Lazarus Group, a cybercrime syndicate linked to North Korea, has long been a thorn in the side of the crypto industry. Since 2017, the group has stolen over $6 billion in digital assets, funneling the proceeds into the country’s ballistic missile program. The Bybit heist alone accounts for nearly a quarter of that total.